Information Security Lead

Key Responsibilities :

• Compliance & Certification Management : Own end-to-end lifecycle management of PCI DSS certification, maintain and renew ISO 27001 certification, and drive adoption of new certifications (SOC 2, DPDP, RBI guidelines).

• DPDP Act Compliance : Lead compliance programme under India's DPDP Act, 2023, conduct data mapping, and implement privacy-by-design principles.

• External & Regulatory Audit Management : Serve as the primary point of contact for external audits, coordinate bank/NBFC partner audits, and ensure audit readiness.

• Information Security Management : Define and maintain ISMS, conduct risk assessments, oversee VAPT, and manage security incident response.

• Vendor & Third-Party Risk Management : Assess security posture of vendors and maintain risk registers.